Privacy Policy

Introduction

This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit charlyjordan.com and related pages (the "Site"). In this policy, "we," "our," and "us" refer to the operators of the Site. It also explains your privacy rights under applicable laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and similar state and international privacy laws.

Who we are

We are the data controller responsible for your personal information processed through this Site. For privacy-related requests, contact us at management@charlyjordan.com or through the contact section of this website.

Information we collect

We collect information in the following categories depending on how you use the Site:

• Information you provide: contact details (such as name and email address) and any other information you choose to include when you email us or otherwise contact us.
• Device and usage information: IP address, browser type, operating system, referring URLs, pages viewed, and approximate location derived from IP address, collected automatically when you visit the Site.
• Accessibility and preference data: settings you choose in our accessibility widget (such as text size, high contrast, reduced motion, and link underlining), stored locally in your browser.
• Session data: limited browser session information (such as whether you have previously visited the home page), stored locally to support Site functionality.

We do not intentionally collect sensitive personal information, and we do not knowingly collect personal information from children under 16 (or the applicable age of digital consent in your jurisdiction).

How we use your information

We use personal information to:

• Respond to inquiries and communicate with you
• Operate, maintain, and improve the Site
• Support accessibility features and remember your preferences
• Monitor Site performance, security, and technical issues
• Comply with legal obligations and enforce our terms

Legal bases for processing (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal information only where we have a valid legal basis:

• Consent: where you have given clear consent (for example, optional communications).
• Contract: where processing is necessary to respond to your requests or take steps at your request before entering a contract.
• Legitimate interests: to operate and secure the Site, improve user experience, and communicate with you, balanced against your rights.
• Legal obligation: where we must comply with applicable law.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.

Cookies and local storage

We use browser local storage, session storage, and cookies as follows:

• Essential: site security and access controls, accessibility preferences, basic session preferences, and remembering your cookie consent choice.
• Optional: only if you select "Accept all" in the cookie banner. We do not currently use optional advertising cookies on this Site.

You can choose Accept all or Essential only when the banner appears. To change your choice later, clear site data for this website in your browser settings and reload the page.

When you follow links to third-party platforms (such as Spotify, social media, or ticketing partners), those services may set their own cookies or similar technologies under their own privacy policies. We do not control third-party tracking.

How we share information

We do not sell or share personal information for cross-context behavioral advertising. We may disclose information only in these circumstances:

• Service providers: hosting, infrastructure, email, and technical support providers that process data on our behalf under contractual safeguards.
• Third-party integrations: when you interact with embedded content or external links (such as Spotify, Bandsintown, or social platforms), those providers may receive information directly from your device.
• Legal and safety: to comply with law, respond to lawful requests, or protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to appropriate protections.

International data transfers

We are based in the United States. If you access the Site from outside the U.S., your information may be transferred to, stored in, and processed in the U.S. and other countries that may not provide the same level of data protection as your home country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms for transfers from the EEA, UK, or Switzerland.

Data retention

We retain personal information only as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law. Contact correspondence is generally retained for the period needed to respond and manage ongoing communications. Browser-stored preferences remain on your device until you clear them or reset your settings.

Your rights (GDPR / UK GDPR)

If you are in the EEA, UK, or Switzerland, you may have the following rights:

• Access a copy of your personal information
• Request correction of inaccurate information
• Request deletion of your information
• Request restriction of processing in certain circumstances
• Request data portability where applicable
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority

To exercise these rights, contact us at management@charlyjordan.com. We may need to verify your identity before responding.

Your rights (CCPA / CPRA and U.S. state privacy laws)

If you are a California resident or covered by similar U.S. state privacy laws, you may have the following rights:

• Know what personal information we collect, use, and disclose
• Request access to specific pieces of personal information we hold about you
• Request deletion of personal information, subject to legal exceptions
• Request correction of inaccurate personal information
• Opt out of the sale or sharing of personal information for cross-context behavioral advertising
• Not receive discriminatory treatment for exercising privacy rights

We do not sell personal information and do not share personal information for cross-context behavioral advertising as defined under California law. You do not need to submit a "Do Not Sell or Share My Personal Information" request for this Site on that basis.

To submit a privacy request, email management@charlyjordan.com with the subject line "Privacy Request." We will verify and respond within the timeframes required by applicable law. You may designate an authorized agent to submit a request on your behalf where permitted by law.

Other regions

Depending on where you live, you may have additional rights under local privacy laws (such as Canada's PIPEDA, Brazil's LGPD, or Australia's Privacy Act). Contact us to exercise those rights, and we will respond in accordance with applicable law.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was most recently revised. Material changes will be posted on this page. Your continued use of the Site after changes become effective constitutes acknowledgment of the updated policy, except where further consent is required by law.

Contact us

If you have questions about this Privacy Policy or our data practices, contact us through the contact section of this website or email management@charlyjordan.com.